*.admission.com

Issued by GlobalSign Atlas R3 DV TLS CA 2023 Q4

About this certificate

This digital certificate with serial number 01:fd:18:4a:df:40:2a:db:5a:dd:b8:b9:30:38:2d:fd was issued on by GlobalSign nv-sa.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=*.admission.com

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate will expire on

Certificate Details

Serial Number (hex): 01:fd:18:4a:df:40:2a:db:5a:dd:b8:b9:30:38:2d:fd
Serial Number (int): 2643371810801471786965291086938385917
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: d2:79:f9:20:98:82:7c:fc:ec:6d:76:cd:45:a4:04:07:9c:83:8e:58
AuthorityKeyId: aa:11:71:8f:95:c4:58:98:8b:b1:6e:0f:3b:50:68:24:bc:b8:19:bc

Fingerprint (sha1): f4:4f:40:1b:e5:2a:bf:3b:dd:4c:54:7d:6b:5f:8f:33:95:e0:ff:1c
Fingerprint (sha256): 60:c8:16:7a:65:cd:a3:69:76:2c:bb:46:69:1a:c3:b1:fb:d8:fd:19:75:3f:28:9a:6d:30:06:fe:66:45:01:2f

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2023q4.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2023q4
CRL Distribution Point: http://crl.globalsign.com/ca/gsatlasr3dvtlsca2023q4.crl

Check the revocation status for certificate *.admission.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.admission.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.admission.com
*.biletix.com
*.comedystopcopenhagen.dk
*.livenation.ae
*.livenation.cn
*.livenation.co.il
*.livenation.co.jp
*.livenation.co.nz
*.livenation.co.th
*.livenation.co.uk
*.livenation.co.za
*.livenation.com.au
*.livenation.com.tw
*.livenation.cz
*.livenation.de
*.livenation.dk
*.livenation.ee
*.livenation.es
*.livenation.fi
*.livenation.fr
*.livenation.hk
*.livenation.hu
*.livenation.it
*.livenation.kr
*.livenation.lt
*.livenation.nl
*.livenation.no
*.livenation.pl
*.livenation.qa
*.livenation.se
*.livenation.sg
*.livenationinternational.com
*.lne.nonprod.public.tmaws.eu
*.ticketmaster.at
*.ticketmaster.be
*.ticketmaster.ca
*.ticketmaster.ch
*.ticketmaster.co.nz
*.ticketmaster.com
*.ticketmaster.com.au
*.ticketmaster.cz
*.ticketmaster.de
*.ticketmaster.dk
*.ticketmaster.es
*.ticketmaster.fi
*.ticketmaster.fr
*.ticketmaster.it
*.ticketmaster.nl
*.ticketmaster.no
*.ticketmaster.pl
*.ticketmaster.se
*.ticketweb.co.uk
*.tmol.co
admin.preprod-verifiedfan.ticketmaster.com
admin.verifiedfan.ticketmaster.com
am-prod-client-files.ppub-tmaws.io
am-static-01.ticketmaster.com
am-static-02.ppub-tmaws.io
am-static-03.ppub-tmaws.io
am-static-04.ppub-tmaws.io
am-stg-client-files.ppub-tmaws.io
am-stg-common-content.ppub-tmaws.io
buy.taylorswifttix.com
checkout.ticketmaster.com
common-widgets.ppub-tmaws.io
concerts.livenation.com
embed-au-alpha.ticketmaster.net
embed-au-int.ticketmaster.net
embed.ticketmaster.com.au
fr.livenation.be
harrypotter.ticketmaster.com.au
identity.eventinventory.com
identity.ticketmaster.co.nz
identity.ticketmaster.co.uk
identity.ticketmaster.com.au
identity.ticketmaster.com.mx
identity.ticketmaster.ie
int-checkout.ticketmaster.net
m.ticketmaster.co.nz
m.ticketmaster.com.au
m.ticketmaster.com.mx
mw.ticketmaster.com
nl.livenation.be
preprod1-am.ticketmaster.com
stage.checkout.ticketmaster.com
stg-common-widgets.ppub-tmaws.io
stg1-am.ticketmaster.com
ticketmaster.ca
ticketmaster.co.nz
ticketmaster.co.uk
ticketmaster.com
ticketmaster.ie
verifiedfan.livenation.com
verifiedfan.ticketmaster.ca
verifiedfan.ticketmaster.co.nz
verifiedfan.ticketmaster.co.uk
verifiedfan.ticketmaster.com.au
verifiedfan.ticketmaster.ie
www.verifiedfan.ticketmaster.com
micro-au.ticketmaster.net

Other certificates including the domain name admission.com

(limited to 100 certificates)
dns-vetting1-mims-pawel.map.fastly.net
mirage.admission.com
ticketmaster3.map.fastly.net
ticketmaster3.map.fastly.net
ticketmaster3.map.fastly.net
dns-vetting1-mims-pawel.map.fastly.net
ticketmaster3.map.fastly.net
dns-vetting1-mims-pawel.map.fastly.net
ticketmaster6.map.fastly.net
ticketmaster3.map.fastly.net
ticketmaster3.map.fastly.net
ticketmaster3.map.fastly.net
ticketmaster6.map.fastly.net
dns-vetting1-mims-pawel.map.fastly.net
onsale.admission.com
admission.com
ticketmaster3.map.fastly.net
bellagio.admission.com
bellagio.admission.com
ticketmaster4.map.fastly.net
dns-vetting1d.map.fastly.net
ticketmaster6.map.fastly.net
ticketmaster3.map.fastly.net
ticketmaster3.map.fastly.net
dns-vetting1-mims-pawel.map.fastly.net
ticketmaster4.map.fastly.net
dns-vetting1-mims-pawel.map.fastly.net
ticketmaster6.map.fastly.net
ticketmaster6.map.fastly.net
admission.com
dns-vetting1-mims-pawel.map.fastly.net
ticketmaster4.map.fastly.net
ticketmaster6.map.fastly.net
ticketmaster4.map.fastly.net
dns-vetting1-mims-pawel.map.fastly.net
ticketmaster3.map.fastly.net
ticketmaster6.map.fastly.net
ticketmaster6.map.fastly.net
ticketmaster6.map.fastly.net
dns-vetting1-mims-pawel.map.fastly.net
ticketmaster3.map.fastly.net
ticketmaster4.map.fastly.net
dns-vetting1-mims-pawel.map.fastly.net
ticketmaster6.map.fastly.net
*.admission.com
admission.com

tm.vegas.admission.com
ticketweb.co.uk
dns-vetting1-mims-pawel.map.fastly.net
ticketmaster6.map.fastly.net
ticketmaster6.map.fastly.net
ticketmaster3.map.fastly.net
ticketmaster4.map.fastly.net
ticketmaster6.map.fastly.net
ticketmaster3.map.fastly.net
*.admission.com
dns-vetting1-mims-pawel.map.fastly.net
ticketmaster6.map.fastly.net
dns-vetting1-mims-pawel.map.fastly.net
ticketmaster4.map.fastly.net
ticketmaster4.map.fastly.net
mail-na.livenation.com
ticketmaster6.map.fastly.net
ticketmaster6.map.fastly.net
ticketmaster3.map.fastly.net
ticketmaster4.map.fastly.net
ticketmaster4.map.fastly.net
ticketmaster6.map.fastly.net
dns-vetting1-mims-pawel.map.fastly.net
ticketmaster4.map.fastly.net
ticketmaster6.map.fastly.net
ticketmaster6.map.fastly.net
ticketmaster4.map.fastly.net
ticketmaster3.map.fastly.net
ticketmaster4.map.fastly.net
ticketmaster6.map.fastly.net
ticketmaster4.map.fastly.net
ticketmaster6.map.fastly.net
ticketmaster4.map.fastly.net
dns-vetting1-mims-pawel.map.fastly.net
ticketmaster6.map.fastly.net
ticketmaster6.map.fastly.net
ticketmaster6.map.fastly.net
ticketmaster4.map.fastly.net
mgm.admission.com
ticketmaster6.map.fastly.net
ticketmaster6.map.fastly.net
ticketmaster4.map.fastly.net
mgm.admission.com
dns-vetting1-mims-pawel.map.fastly.net
ticketmaster4.map.fastly.net
ticketmaster3.map.fastly.net
ticketmaster3.map.fastly.net
ticketmaster3.map.fastly.net
ticketmaster4.map.fastly.net
ticketmaster6.map.fastly.net
ticketmaster6.map.fastly.net
ticketmaster3.map.fastly.net
dns-vetting1-jeffg-noah.map.fastly.net

Certificate

The complete raw certificate details for *.admission.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIPazCCDlOgAwIBAgIQAf0YSt9AKtta3bi5MDgt/TANBgkqhkiG9w0BAQsFADBY
MQswCQYDVQQGEwJCRTEZMBcGA1UEChMQR2xvYmFsU2lnbiBudi1zYTEuMCwGA1UE
AxMlR2xvYmFsU2lnbiBBdGxhcyBSMyBEViBUTFMgQ0EgMjAyMyBRNDAeFw0yMzEx
MjEyMzA2MjVaFw0yNDEyMjIyMzA2MjRaMBoxGDAWBgNVBAMMDyouYWRtaXNzaW9u
LmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAM7Ftop64/8+Jcqu
jvTHh2VAdkdiRBr1wDvjgxeoicDdwPkQ6Tgz070elom3KPOk9oXWb+HkKXrrEkGd
zjotdMQVj8/HbdFikv8u4VD/QA22LcPYD5fwoM1qoo/3kjhzYUoWlRPZIQ6ljCMJ
0TrgIPQ17FLd5xoNgQ2KiO+PacP5XVLq4y16UlBm8uZ89eBaoabBX9ssl5rB85lN
bZCmVhFq9N6Sb5sHyjrF9QB3lVi7qYtTW96U3Sayt3U8+JZleEeokZDz1I6S2jYH
mfWyHC+YttCznu2gy3X2Fqaw27kY5aNOsD4PjOvSjQ5rFA7IzxjerC+oERcc3EZd
MBz8y5cCAwEAAaOCDG0wggxpMIIJIQYDVR0RBIIJGDCCCRSCDyouYWRtaXNzaW9u
LmNvbYINKi5iaWxldGl4LmNvbYIZKi5jb21lZHlzdG9wY29wZW5oYWdlbi5ka4IP
Ki5saXZlbmF0aW9uLmFlgg8qLmxpdmVuYXRpb24uY26CEioubGl2ZW5hdGlvbi5j
by5pbIISKi5saXZlbmF0aW9uLmNvLmpwghIqLmxpdmVuYXRpb24uY28ubnqCEiou
bGl2ZW5hdGlvbi5jby50aIISKi5saXZlbmF0aW9uLmNvLnVrghIqLmxpdmVuYXRp
b24uY28uemGCEyoubGl2ZW5hdGlvbi5jb20uYXWCEyoubGl2ZW5hdGlvbi5jb20u
dHeCDyoubGl2ZW5hdGlvbi5jeoIPKi5saXZlbmF0aW9uLmRlgg8qLmxpdmVuYXRp
b24uZGuCDyoubGl2ZW5hdGlvbi5lZYIPKi5saXZlbmF0aW9uLmVzgg8qLmxpdmVu
YXRpb24uZmmCDyoubGl2ZW5hdGlvbi5mcoIPKi5saXZlbmF0aW9uLmhrgg8qLmxp
dmVuYXRpb24uaHWCDyoubGl2ZW5hdGlvbi5pdIIPKi5saXZlbmF0aW9uLmtygg8q
LmxpdmVuYXRpb24ubHSCDyoubGl2ZW5hdGlvbi5ubIIPKi5saXZlbmF0aW9uLm5v
gg8qLmxpdmVuYXRpb24ucGyCDyoubGl2ZW5hdGlvbi5xYYIPKi5saXZlbmF0aW9u
LnNlgg8qLmxpdmVuYXRpb24uc2eCHSoubGl2ZW5hdGlvbmludGVybmF0aW9uYWwu
Y29tgh0qLmxuZS5ub25wcm9kLnB1YmxpYy50bWF3cy5ldYIRKi50aWNrZXRtYXN0
ZXIuYXSCESoudGlja2V0bWFzdGVyLmJlghEqLnRpY2tldG1hc3Rlci5jYYIRKi50
aWNrZXRtYXN0ZXIuY2iCFCoudGlja2V0bWFzdGVyLmNvLm56ghIqLnRpY2tldG1h
c3Rlci5jb22CFSoudGlja2V0bWFzdGVyLmNvbS5hdYIRKi50aWNrZXRtYXN0ZXIu
Y3qCESoudGlja2V0bWFzdGVyLmRlghEqLnRpY2tldG1hc3Rlci5ka4IRKi50aWNr
ZXRtYXN0ZXIuZXOCESoudGlja2V0bWFzdGVyLmZpghEqLnRpY2tldG1hc3Rlci5m
coIRKi50aWNrZXRtYXN0ZXIuaXSCESoudGlja2V0bWFzdGVyLm5sghEqLnRpY2tl
dG1hc3Rlci5ub4IRKi50aWNrZXRtYXN0ZXIucGyCESoudGlja2V0bWFzdGVyLnNl
ghEqLnRpY2tldHdlYi5jby51a4IJKi50bW9sLmNvgiphZG1pbi5wcmVwcm9kLXZl
cmlmaWVkZmFuLnRpY2tldG1hc3Rlci5jb22CImFkbWluLnZlcmlmaWVkZmFuLnRp
Y2tldG1hc3Rlci5jb22CImFtLXByb2QtY2xpZW50LWZpbGVzLnBwdWItdG1hd3Mu
aW+CHWFtLXN0YXRpYy0wMS50aWNrZXRtYXN0ZXIuY29tghphbS1zdGF0aWMtMDIu
cHB1Yi10bWF3cy5pb4IaYW0tc3RhdGljLTAzLnBwdWItdG1hd3MuaW+CGmFtLXN0
YXRpYy0wNC5wcHViLXRtYXdzLmlvgiFhbS1zdGctY2xpZW50LWZpbGVzLnBwdWIt
dG1hd3MuaW+CI2FtLXN0Zy1jb21tb24tY29udGVudC5wcHViLXRtYXdzLmlvghZi
dXkudGF5bG9yc3dpZnR0aXguY29tghljaGVja291dC50aWNrZXRtYXN0ZXIuY29t
ghxjb21tb24td2lkZ2V0cy5wcHViLXRtYXdzLmlvghdjb25jZXJ0cy5saXZlbmF0
aW9uLmNvbYIfZW1iZWQtYXUtYWxwaGEudGlja2V0bWFzdGVyLm5ldIIdZW1iZWQt
YXUtaW50LnRpY2tldG1hc3Rlci5uZXSCGWVtYmVkLnRpY2tldG1hc3Rlci5jb20u
YXWCEGZyLmxpdmVuYXRpb24uYmWCH2hhcnJ5cG90dGVyLnRpY2tldG1hc3Rlci5j
b20uYXWCG2lkZW50aXR5LmV2ZW50aW52ZW50b3J5LmNvbYIbaWRlbnRpdHkudGlj
a2V0bWFzdGVyLmNvLm56ghtpZGVudGl0eS50aWNrZXRtYXN0ZXIuY28udWuCHGlk
ZW50aXR5LnRpY2tldG1hc3Rlci5jb20uYXWCHGlkZW50aXR5LnRpY2tldG1hc3Rl
ci5jb20ubXiCGGlkZW50aXR5LnRpY2tldG1hc3Rlci5pZYIdaW50LWNoZWNrb3V0
LnRpY2tldG1hc3Rlci5uZXSCFG0udGlja2V0bWFzdGVyLmNvLm56ghVtLnRpY2tl
dG1hc3Rlci5jb20uYXWCFW0udGlja2V0bWFzdGVyLmNvbS5teIITbXcudGlja2V0
bWFzdGVyLmNvbYIQbmwubGl2ZW5hdGlvbi5iZYIccHJlcHJvZDEtYW0udGlja2V0
bWFzdGVyLmNvbYIfc3RhZ2UuY2hlY2tvdXQudGlja2V0bWFzdGVyLmNvbYIgc3Rn
LWNvbW1vbi13aWRnZXRzLnBwdWItdG1hd3MuaW+CGHN0ZzEtYW0udGlja2V0bWFz
dGVyLmNvbYIPdGlja2V0bWFzdGVyLmNhghJ0aWNrZXRtYXN0ZXIuY28ubnqCEnRp
Y2tldG1hc3Rlci5jby51a4IQdGlja2V0bWFzdGVyLmNvbYIPdGlja2V0bWFzdGVy
Lmllghp2ZXJpZmllZGZhbi5saXZlbmF0aW9uLmNvbYIbdmVyaWZpZWRmYW4udGlj
a2V0bWFzdGVyLmNhgh52ZXJpZmllZGZhbi50aWNrZXRtYXN0ZXIuY28ubnqCHnZl
cmlmaWVkZmFuLnRpY2tldG1hc3Rlci5jby51a4IfdmVyaWZpZWRmYW4udGlja2V0
bWFzdGVyLmNvbS5hdYIbdmVyaWZpZWRmYW4udGlja2V0bWFzdGVyLmllgiB3d3cu
dmVyaWZpZWRmYW4udGlja2V0bWFzdGVyLmNvbYIZbWljcm8tYXUudGlja2V0bWFz
dGVyLm5ldDAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsG
AQUFBwMCMB0GA1UdDgQWBBTSefkgmIJ8/Oxtds1FpAQHnIOOWDBXBgNVHSAEUDBO
MAgGBmeBDAECATBCBgorBgEEAaAyCgEDMDQwMgYIKwYBBQUHAgEWJmh0dHBzOi8v
d3d3Lmdsb2JhbHNpZ24uY29tL3JlcG9zaXRvcnkvMAwGA1UdEwEB/wQCMAAwgZ4G
CCsGAQUFBwEBBIGRMIGOMEAGCCsGAQUFBzABhjRodHRwOi8vb2NzcC5nbG9iYWxz
aWduLmNvbS9jYS9nc2F0bGFzcjNkdnRsc2NhMjAyM3E0MEoGCCsGAQUFBzAChj5o
dHRwOi8vc2VjdXJlLmdsb2JhbHNpZ24uY29tL2NhY2VydC9nc2F0bGFzcjNkdnRs
c2NhMjAyM3E0LmNydDAfBgNVHSMEGDAWgBSqEXGPlcRYmIuxbg87UGgkvLgZvDBI
BgNVHR8EQTA/MD2gO6A5hjdodHRwOi8vY3JsLmdsb2JhbHNpZ24uY29tL2NhL2dz
YXRsYXNyM2R2dGxzY2EyMDIzcTQuY3JsMIIBfwYKKwYBBAHWeQIEAgSCAW8EggFr
AWkAdwDuzdBk1dsazsVct520zROiModGfLzs3sNRSFlGcR+1mwAAAYv0IrUPAAAE
AwBIMEYCIQDpONSgBrczr6Gv7PBLYffTJTZz2hI8SuKPzzsCq40kCAIhAM5mpqQ0
j77du3Ut2TbyYleyp/+duWoGBFyMVNF3C0BhAHUAPxdLT9ciR1iUHWUchL4NEu2Q
N38fhWrrwb8ohez4ZG4AAAGL9CK1ogAABAMARjBEAiAF9XcTNCGgupg86Dot6ZtG
6IPMn30AnPTzGIMIzNvjAgIgHLUnRhGy2t7VAsIhSvO4MN7OO559RbbpV/LwrWCf
kuEAdwDatr9rP7W2Ip+bwrtca+hwkXFsu1GEhTS9pD0wSNf7qwAAAYv0IrZfAAAE
AwBIMEYCIQC61DnTxiSm9kTtYQKhX7iJ+jOHnsSFFpDp6s/EaEewRwIhAIzVJoAb
upIvfG9FV86BN6yFCAfyJ7zLla6p8vS/VYmWMA0GCSqGSIb3DQEBCwUAA4IBAQA/
1CgDP4SaAJpboM4bacBZmBFIxHuSj5u+5JMjQpSkJ5TZsoarkW4SY+D6l1BcHGzX
VuFksknSNW6H1ZTRMHbH0MrnI2W9uLB5ExncoAtS0h4tLzrG8Dupb/GR4Mq3m1Bx
zogoUqZVsd72kAyQ1hpkFkH25IlV5Wk6k5akWB/abDtDASpipTSpn5NUMD+PuKtc
AQqhtrgBinCmOPawne9LtERuXCdFRDgawZ4Wb5qKlERKm/QOcjo260zKQ5feZnXo
w1zi97+q1nDWOz5aJVJxdG072ty2OPO8Fzrz/WfyCnXBVgTZ3W+xhxq26+6+H1js
VmypLW2EcvCiY9cwnxA4
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzsW2inrj/z4lyq6O9MeH
ZUB2R2JEGvXAO+ODF6iJwN3A+RDpODPTvR6Wibco86T2hdZv4eQpeusSQZ3OOi10
xBWPz8dt0WKS/y7hUP9ADbYtw9gPl/CgzWqij/eSOHNhShaVE9khDqWMIwnROuAg
9DXsUt3nGg2BDYqI749pw/ldUurjLXpSUGby5nz14FqhpsFf2yyXmsHzmU1tkKZW
EWr03pJvmwfKOsX1AHeVWLupi1Nb3pTdJrK3dTz4lmV4R6iRkPPUjpLaNgeZ9bIc
L5i20LOe7aDLdfYWprDbuRjlo06wPg+M69KNDmsUDsjPGN6sL6gRFxzcRl0wHPzL
lwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2643371810801471786965291086938385917
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Atlas R3 DV TLS CA 2023 Q4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-21 23:06:25 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-12-22 23:06:24 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.admission.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26102586761951643505516141441578321216167552868873201440578496241122720969921996536528517177429587629447952337593538018380518953005151204021996476721507107257965417598931963268397565634517095123101590912841326717792078849711837200718827791297892147556967852040024804838663170730098919018397920937950912824435987009635396300610723895817961114555439945826747094490760163622394928840726801668607906846615773923568557402264778069323819691259627081957965577955488677589087154240935778145098320160688904229516100933001623286338089711342689199811937186018082436571149814541428182447035442636157643997912680056688630778612631
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2328 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.admission.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.biletix.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.comedystopcopenhagen.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.livenation.ae'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.livenation.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.livenation.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.livenation.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.livenation.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.livenation.co.th'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.livenation.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.livenation.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.livenation.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.livenation.com.tw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.livenation.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.livenation.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.livenation.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.livenation.ee'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.livenation.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.livenation.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.livenation.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.livenation.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.livenation.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.livenation.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.livenation.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.livenation.lt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.livenation.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.livenation.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.livenation.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.livenation.qa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.livenation.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.livenation.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.livenationinternational.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lne.nonprod.public.tmaws.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ticketmaster.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ticketmaster.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ticketmaster.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ticketmaster.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ticketmaster.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ticketmaster.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ticketmaster.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ticketmaster.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ticketmaster.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ticketmaster.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ticketmaster.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ticketmaster.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ticketmaster.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ticketmaster.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ticketmaster.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ticketmaster.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ticketmaster.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ticketmaster.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ticketweb.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tmol.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.preprod-verifiedfan.ticketmaster.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.verifiedfan.ticketmaster.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'am-prod-client-files.ppub-tmaws.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'am-static-01.ticketmaster.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'am-static-02.ppub-tmaws.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'am-static-03.ppub-tmaws.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'am-static-04.ppub-tmaws.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'am-stg-client-files.ppub-tmaws.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'am-stg-common-content.ppub-tmaws.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buy.taylorswifttix.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'checkout.ticketmaster.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'common-widgets.ppub-tmaws.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'concerts.livenation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'embed-au-alpha.ticketmaster.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'embed-au-int.ticketmaster.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'embed.ticketmaster.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fr.livenation.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'harrypotter.ticketmaster.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'identity.eventinventory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'identity.ticketmaster.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'identity.ticketmaster.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'identity.ticketmaster.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'identity.ticketmaster.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'identity.ticketmaster.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'int-checkout.ticketmaster.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.ticketmaster.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.ticketmaster.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.ticketmaster.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mw.ticketmaster.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nl.livenation.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod1-am.ticketmaster.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.checkout.ticketmaster.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg-common-widgets.ppub-tmaws.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg1-am.ticketmaster.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ticketmaster.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ticketmaster.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ticketmaster.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ticketmaster.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ticketmaster.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'verifiedfan.livenation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'verifiedfan.ticketmaster.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'verifiedfan.ticketmaster.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'verifiedfan.ticketmaster.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'verifiedfan.ticketmaster.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'verifiedfan.ticketmaster.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.verifiedfan.ticketmaster.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'micro-au.ticketmaster.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d279f92098827cfcec6d76cd45a404079c838e58
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.10.1.3
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (145 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2023q4'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2023q4.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName aa11718f95c458988bb16e0f3b506824bcb819bc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (65 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/ca/gsatlasr3dvtlsca2023q4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		003fd428033f849a009a5ba0ce1b69c059981148c47b928f9bbee493234294a42794d9b286ab916e1263e0fa97505c1c6cd756e164b249d2356e87d594d13076c7d0cae72365bdb8b0791319dca00b52d21e2d2f3ac6f03ba96ff191e0cab79b5071ce882852a655b1def6900c90d61a641641f6e48955e5693a9396a4581fda6c3b43012a62a534a99f9354303f8fb8ab5c010aa1b6b8018a70a638f6b09def4bb4446e5c274544381ac19e166f9a8a94444a9bf40e723a36eb4cca4397de6675e8c35ce2f7bfaad670d63b3e5a255271746d3bdadcb638f3bc173af3fd67f20a75c15604d9dd6fb1871ab6ebeebe1f58ec566ca92d6d8472f0a263d7309f1038